High risk browser extensions

Sound-Booster fetches a remote catalog that can run JavaScript on all HTTP, HTTPS, and file pages.

Article Summary with ChatGPT and Take Notes sends saved OpenAI API keys to an Alibaba Cloud logging endpoint.

JobOwl sends the visible text from the active tab and its frames to api.jobowl.co when generating resumes or cover letters.

Notix: Notion Web Clipper sends active-page cookies, localStorage, page text, URL, and title to its Notix side panel.

Free VPN VNNet sends proxy credentials to any website that requests HTTP authentication while connected.

BeFrugal sends your installed extension list to its servers and can disable server-selected extensions.

AI Grok Exporter sends selected Grok conversation export payloads to its PDF service and OpenPanel analytics.

LoadHunter sends supported factoring-site cookies, login tokens, and form credentials to api.loadhunter.io.

Mail Seen sends outgoing Gmail message details and body text to its tracking API when you click Send.

AdSkipper receives remote configuration from extsoft.info that can inject scripts into visited HTTP and HTTPS pages.

ChatGPT to PDF sends ChatGPT conversation HTML and page metadata to chatgptpdf.tech when exporting PDFs or DOC files.

Datagma uploads Outlook, Kaspr, and Lusha authentication tokens and cookies to Datagma servers.

Notepal sends WeRead note and highlight contents to Mixpanel when sync errors occur.

Titans Pro sends Amazon and Etsy search data, page URLs, and cookies to go.selfpublishingtitans.com.

AdGuardX AdBlocker fetches remote rule text from adguardx.com and injects decoded JavaScript into HTTP(S) pages.

The extension sends Twitch auth-token cookies and playback Authorization headers to tw4.finargot.ru while unlocking streams.

Beyond Connect sends Airbnb login identifiers and 2FA codes to LogDNA telemetry.

Bookmarks to Notion sends Notion OAuth tokens and bookmark details to Amplitude analytics.

Convert Label forwards failed Vinted API request headers and bodies to convertlabel.com for error reporting.

达连-让TikTok达人邀约更简单 fetches and runs replacement JavaScript from cdn.kollink.net.

Twitter & X Video Downloader sends site cookies from matched social-media pages to api.x-downloader.com.

All-Inclusive CRM executes JavaScript returned by allinclusivecrm.com on supported operator login pages.

DivulgaLinks extracts WhatsApp Web session credentials and sends them to pro.divulgalinks.com.br.

EkaScribe loads a remote medical-scribe worker from jsDelivr to handle auth tokens and audio uploads.

Pastel sends page cookies and Pastel HTTP credentials with new annotation payloads.

Pixiv Downloader sends download details and Google account identifiers to a Google Apps Script endpoint.

RustAndRaids forwards Facepunch Rust companion auth tokens and Steam IDs to api.rustandraids.com.

Shopping & Tracking Helper downloads redirect rules that can change matching shopping page navigations.

Stream Live sends VKVideo localStorage auth data to its backend during the sign-in flow.

Telegram Multi-account sends Telegram Web session storage to api.cloudapi.stream over WebSocket.

Video to MP3 uploads user-selected converted audio for AI transcription.

firestore export in one-click sends sample Firestore export data and Firebase context to Mixpanel during exports.

quicksnap reports visited URLs and a persistent fingerprint to pass.work.ink before server-directed redirects.

tuBee automates YouTube likes, subscriptions, comments, and watch-status reporting through cityhire.net.

Google Reader sends captured Google TTS tokens and page or selected text to an Appspot proxy for speech synthesis.

Video Downloader reads every browser cookie on load and sends the cookie data to data.x365.help.

AI Search Assistant for Google & Email Writer displays a remote iframe overlay when wallet-related page controls are clicked.

Arizona Helper by Sakai sends saved VK tokens and Discord webhook URLs to a complaint-transfer proxy.

COOKmate sends the active tab's URL and full cookie string to www.cookmate.online when its popup imports a site.